afrah114.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:1f:41:f9:f4:c2:b1:2f:22:b9:31:2c:2e:2a:6c:60:b2:e7 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=afrah114.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:1f:41:f9:f4:c2:b1:2f:22:b9:31:2c:2e:2a:6c:60:b2:e7
Serial Number (int): 271973308835806669660057979120470116578023
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:2a:f7:10:2c:c5:c0:2d:51:d1:88:2d:ec:75:23:98:cf:39:df:b6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d0:72:3a:f5:60:4d:1e:02:0c:24:0c:2a:74:12:4d:f1:9a:d2:72:71
Fingerprint (sha256): 66:43:11:35:82:53:4a:12:a7:11:e3:2a:02:7f:99:62:dc:a5:86:33:a4:54:5a:c8:cb:bf:d4:b4:d7:58:4f:ea

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate afrah114.co.za

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afrah114.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afrah114.co.za
mail.afrah114.co.za
pop.afrah114.co.za
smtp.afrah114.co.za
www.afrah114.co.za

Other certificates including the domain name afrah114.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for afrah114.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoTK0MonjJ3Okcxa2bPO
J5zWHY8tAoP1SRZKzT4hdLbeJH6q8ZrjyTGBF0HNZ0Z3d9GD/8JMiH0gesQZ/ozZ
3ba0uxsREexSonbBIMlGW55C0i3R+A9r0XRFUHYVuIlHOqPqHUD+SGJKfieCeRA2
p3a7kLIcb+NklNiT3u3ynBNtQj3sBxhvv3135WsKLnmsi7pozXd3+FAbaxFJUExA
2QpRZYsHuzLPKxo92ReMjhFnY1d7e8UDQ78sLXVaQB18ZuoR0EFnOrwORWK00rVj
WNZWI6EpteZsbfct3LwLq9LUMSEM/Av/qPUPFCdIvyf6Mm+NpBkGDtiCXRZQIgUV
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271973308835806669660057979120470116578023
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 09:00:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 09:00:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afrah114.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24555713461648981525637638869820577811231099022676836595936319876439083888404200724539576035840362659604834588662898593269496593774950852467222491576064797001593341480284871284847644141332183078149491122411105809146911693670685954932867703533348490895533167395072683637624030219248233866591019753297388954779778526676014548886595132863523072358165710830096168119300686464816315921054348665690832788002409361645003170957210224089111402558837346470453113119457326343854009495614896850067724108935566710791156457121752502908785950175606864775628711936027470381494454963771140468987745084300804066315852482516859494929769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f2af7102cc5c02d51d1882dec752398cf39dfb6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrah114.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.afrah114.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.afrah114.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.afrah114.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afrah114.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f61f2d56500000403004730450220436dd912623eeee8200df547f7fd42e23738d03935eea3389bba24ab66654a34022100ef585d0223fe9cc0a71884e04595ee791bd63e263b286c326c5519ae1b622c24007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f61f2d61d0000040300463044022042c9df6c6fc6d26223d758046f79b07c31e92818742ffe9c8817ceb701e3782802205538b68ec1c48dc8efc7642b0cee9e5f6c24e7f6401f59cea32e13b288cc3765
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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